Curiosity in Practice
I was invited to attend the 2015 Digicert Security Summit this week in Las Vegas. For a one day conference it had some really amazing talks by some of the smartest people in the industry. Gary McGraw gave an amazing talk on security software development life cycle and the Building Security in Maturity Model (BSIMM). Emily Stark … Read more
I take a lot of screenshots in OSX (⌘+shift+4) to share and for the longest time I just lived with the 2003-era super cool shadow: I finally got tired of it and found the solution to turning it off is these two terminal commands: defaults write com.apple.screencapture disable-shadow -bool true killall SystemUIServer Now my screenshots … Read more
I have been using censys.io a lot lately to do network reconnaissance and noticed they just released a new API that didnt have a CLI frontend so I spent sometime writing a python based one. You can grab a copy here. Usage is: python censys.py -f (search term) It is still pretty rough and I will … Read more
Letsencrypt.org is a new project that offers free TLS certificates to allow people to encrypt their traffic. The project is in a limited beta so I decided that a good test would be to install one of their certificates on to a Nessus scanner I host in AWS. The install wasn’t complicated and only took about 15 … Read more
I have been working on a Bluetooth hacking project recently and couldn’t really find a good bluetooth recon tool so I wrote btrecon to do what I need done. Here is a quick demo: I still have some work to do on this project as I would like to add some logging and menus but it isnt … Read more